infra/homelab/authentik.yml

authentik:
  error_reporting:
    enabled: false
global:
  image:
    tag: 2024.2.3
  env:
    - name: AUTHENTIK_WEB__THREADS
      value: "2"
    - name: AUTHENTIK_SECRET_KEY
      valueFrom:
        secretKeyRef:
          name: authentik-secrets
          key: secret-key
    - name: AUTHENTIK_POSTGRESQL__HOST
      valueFrom:
        secretKeyRef:
          name: hippo-pguser-authentik
          key: host
    - name: AUTHENTIK_POSTGRESQL__PASSWORD
      valueFrom:
        secretKeyRef:
          name: hippo-pguser-authentik
          key: password
    - name: AUTHENTIK_POSTGRESQL__USER
      valueFrom:
        secretKeyRef:
          name: hippo-pguser-authentik
          key: user
    - name: AUTHENTIK_POSTGRESQL__PORT
      valueFrom:
        secretKeyRef:
          name: hippo-pguser-authentik
          key: port

server:
  metrics:
    enabled: true
  ingress:
    # Specify kubernetes ingress controller class name
    ingressClassName: nginx
    enabled: true
    hosts: [ authentik.gmem.ca ]
    tls:
    - hosts:
      - authentik.gmem.ca
      secretName: gmem-ca-wildcard
redis:
    enabled: true